nano-banana

SUSPICIOUS. The skill's purpose and capabilities are mostly aligned for image generation/editing, and the Rebyte relay is disclosed rather than hidden. However, it requires an unverifiable local auth binary, reads a raw auth config file, and sends prompts plus optional source images through a third-party relay, so the overall footprint is higher risk than a normal direct API integration.